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What is claimed: 
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1 . A computer system comprising a first computer node coupled to a 
network, the first node being arranged to provide a service to a second 

5 computer node via a connection over the network; a controller for 

determining access to the service based upon a digital credential 
associated with the connection, the controller being arranged to vary 
access to the service over the connection in response to a change in 
status of the digital credential. 
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2. A computer system according to claim 1 , wherein the controller forms 
part of the first computer node. 



3. A computer system according to claim 1 , wherein the digital credential 
15 is an attribute credential of an entity associated with the second 

computer node. 

4. A computer system according to claim 1 , wherein the first computer 
node is arranged to provide the service to a plurality of computer nodes 

20 via a plurality of respective connections over the network. 

5. A computer system according to claim 4, wherein the controller is 
suitable for arranging digital credentials into groups, each group being 
associated with one or more respective secure connections to allow a 

25 user to monitor the status of the digital credentials associated with a 

secure connection. 



6. A computer system according to claim 4, wherein the controller is 
suitable for arranging digital credentials into groups, each group being 
30 associated with one or more respective secure connections to allow the 

controller to control the digital credentials according to a policy. 
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7. A computer system according to claim 1 , further comprising a digital 
register for listing the status of digital credentials; monitoring means for 
monitoring the digital register for changes in the status of a digital 
credential, wherein the controller is responsive to the monitoring means 
for varying access to the service in response to a change in status of 
the digital credential. 

8. A computer node for providing a service to a second computer node 
via a connection over a network, the computer node comprising a 
controller for determining access to the service based upon a digital 
credential associated with the connection, the controller being arranged 
to vary access to the service over the connection in response to a 
change in status of the digital credential. 

9. A computer node according to claim 8, wherein the service is provided 
to a plurality of computer nodes via a plurality of respective 
connections over the network. 

10. A computer node according to claim 9, wherein the controller is 
suitable for arranging digital credentials into groups, the groups being 
associated with a respective secure connection to allow a user to 
monitor the status of the digital credentials associated with a secure 
connection. 

1 1 . A computer node according to claim 9, wherein the controller is 
suitable for arranging digital credentials into groups, the groups being 
associated with a respective secure connection to allow the controller 
to control the digital credentials according to a policy. 

12. A controller for determining access to a service provided by a first 
computer node to a second computer node via a connection over a 
network, the controller being arranged to vary access to the service 
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over the connection in response to a change in status of a digital 
credential associated with the connection. 

13. A method for providing a service, the method comprising establishing a 
5 connection between a first computer node and a second computer 

node via a network; providing a service for the second computer node 
from the first computer node via the connection; determining access to 
the service based upon a digital credential associated with the 
connection; varying access to the service over the connection in 
1 0 response to a change in status of the digital credential. 

14. A computer system comprising a first computer node coupled to a 
network, the first node being arranged to provide a service to a second 
computer node via a connection over the network; a controller for 

15 determining access to the service based upon a digital credential 

associated with the connection, the first node having memory for 
storing the digital credential associated with the connection and a 
display for presenting to a user information associated with the digital 
credential. 
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15. A computer system according to claim 14, wherein the first node further 
comprises a controller for arranging digital credentials into groups, the 
groups being associated with a respective connection to allow a user to 
monitor digital credentials associated with a connection. 



